Prompt fatigue is the habit of clicking through repeated approval requests without carefully reviewing each one. In security tools, this can happen when users are asked too often to confirm commands, file edits, access requests, or other actions, and the prompts start to feel routine.
It matters because attackers can abuse that trust erosion. If a malicious command is hidden among many normal ones, a tired user may approve it automatically. The same risk appears in agentic coding tools, where frequent permission prompts can lead developers to accept unsafe actions that modify code, run shell commands, or expose secrets. Defenders reduce prompt fatigue by limiting unnecessary prompts, grouping similar actions, using clear risk labels, and reserving manual approval for higher-risk operations. Good policy design should lower friction without training users to ignore the warning signs.